Privacy Policy (Política de Privacidade) — LGPD (Lei 13.709/2018)

PRIVACY POLICY (POLÍTICA DE PRIVACIDADE) — LGPD (LEI 13.709/2018)

Data controller (controlador): Data controller (controlador) name (CNPJ: Controller CNPJ) Effective date: Effective date

1. DATA CONTROLLER AND TRANSPARENCY 1.1. Data controller (controlador) name is the data controller (controlador), as defined by the Lei Geral de Proteção de Dados Pessoais (LGPD, Lei 13.709/2018), Article 9 (dever de transparência), for the personal data described below.

2. PURPOSES AND LEGAL BASES 2.1. Purposes of processing (finalidades): Purposes of processing (finalidades) 2.2. Legal basis (base legal): Legal basis (base legal)

3. SHARING 3.1. Data sharing (compartilhamento)

4. DATA SUBJECT RIGHTS 4.1. Data subject rights (direitos do titular) — including the rights of confirmation, access, correction, anonymisation, portability, deletion and revocation of consent under Article 18 LGPD. 4.2. Contact channel (encarregado/canal de contato): Contact channel (encarregado/canal de contato). 4.3. Data subjects may also lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD).

5. ⚠️ SMALL-BUSINESS REGIME (AGENTE DE PEQUENO PORTE) 5.1. Status: Small-business status. 5.2. Under Resolução CD/ANPD nº 2/2022, small businesses classified as agentes de pequeno porte may DISPENSE WITH a formally designated encarregado (DPO) — while still keeping a functioning contact channel — and benefit from DOUBLED statutory response deadlines to data-subject requests. A simplified processing register (registro simplificado das operações de tratamento) is nonetheless required under Article 37 LGPD.

— — — ⚠️ This is a boilerplate template, not legal advice. Brazilian labour, data-protection, consumer- protection and sanitary law (the Consolidação das Leis do Trabalho — CLT, Decreto-Lei 5.452/1943, as reformed by Lei 13.467/2017; the eSocial digital reporting system, under which the admission event must be filed no later than the day before work starts and the CTPS Digital record is updated automatically; Lei 12.506/2011 on proportional notice periods; Lei 13.352/2016, the Lei do Salão Parceiro; the LGPD — Lei 13.709/2018 — supervised by the ANPD, including the simplified regime for agentes de pequeno porte under Resolução CD/ANPD nº 2/2022; the Código de Defesa do Consumidor — CDC, Lei 8.078/1990 — and Decreto 7.962/2013 for e-commerce; and ANVISA's RDC 216/2004 on food-service good practices, as supplemented by state/municipal vigilância sanitária rules) is highly procedural, tied to fixed statutory deadlines (e.g. eSocial admission BEFORE the first working day, a 3-calendar-day minimum notice for each intermittent-work shift, a 10-day TRCT settlement deadline, a 30-day advance vacation notice) and to significant penalties for missed deadlines or missing documentation. ⚠️ ADDITIONAL CONTEXT TO VERIFY WITH YOUR ADVISORS: (1) NR-1/PGR — psychosocial risk factors (fatores de risco psicossociais, Portaria MTE 1.419/2024) became subject to PUNITIVE fiscalização from 26 May 2026 — confirm your current Programa de Gerenciamento de Riscos (PGR) status (MEI is exempt; low-risk ME/EPP may qualify for a simplified declaration at pgr.trabalho.gov.br); (2) the "pejotização" question (STF Tema 1389) — whether an "autônomo"/"PJ" services arrangement may be reclassified as employment — remained UNRESOLVED by the Supreme Court (STF) as of mid-2026; any PJ/autônomo arrangement carries this litigation risk; (3) NFC-e/NF-e/CF-e-SAT/MFE/NFS-e fiscal documents are issued through your accountant's (contador) authorised system and are OUT OF SCOPE for this template; (4) almost every small business in this segment operates under Simples Nacional (MEI/ME/EPP) — a contador is a de facto mandatory partner for payroll, tax and eSocial compliance. This English text is a DRAFTING AID ONLY. It must be reviewed, translated into Portuguese where required for validity/ enforceability, and adapted by a Brazilian labour/commercial lawyer (advogado) and accountant (contador) — and checked against current guidance from the Ministério do Trabalho e Emprego (MTE), ANPD, ANVISA, Procon and local vigilância sanitária — before use.